Secure Connect Gateway vulnerabilities
51 known vulnerabilities in Secure Connect Gateway from Dell. 51 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Secure Connect Gateway 5.0 - Application: Relative Path Traversal
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leadin
- 8.1 High severity
Secure Connect Gateway 5.0 - Application: Missing Authentication for Critical Functionality
ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this v
- 9.4 Critical severity
Secure Connect Gateway 5.0 - Application: Missing Authorization
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading
- 7.3 High severity
Secure Connect Gateway (SCG) 5.0 Application: Improper Neutralization of Special Elements used in an OS Command
Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentia
- 7.2 High severity
Secure Connect Gateway: Improper Limitation of a Pathname to a Restricted Directory
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker within the management ne
- 8.8 High severity
Secure Connect Gateway (SCG) 5.0 Appliance - SRS: Use of a Broken or Risky Cryptographic Algorithm
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information
- 8.1 High severity
Secure Connect Gateway (SCG) 5.0 Appliance - SRS: Improper Certificate Validation
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and mod
- 8.1 High severity
Secure Connect Gateway-Application: Improper Neutralization of Special Elements used in an SQL Command
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the ap
- 8.8 High severity
Secure Connect Gateway-Application: Improper Neutralization of Special Elements used in an SQL Command
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the a
- 7.6 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in the Filters page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of mal
- 8.8 High severity
Secure Connect Gateway (SCG) 5.0 Appliance - SRS: Authentication Bypass by Spoofing
Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A remote low privileged attacker could potentially exploit this vulnerability, leading to impersonation of the server through presenting a fak